
pingback
A Zeek package to detect the Pingback malware ICMP tunnel command and control (C2) network traffic.
command-and-controlintrusion-detectionmalware-analysis+2
12

A Zeek package to detect the Pingback malware ICMP tunnel command and control (C2) network traffic.

Zeek plugin detecting CallStranger (CVE-2020-12695) exploitation via UPnP SUBSCRIBE/NOTIFY analysis, identifying DDoS amplification, data…

Snort 3 IDS → IPS lab on Kali. Custom detection rules + iptables enforcement against ICMP recon, Nmap SYN scans, Hydra FTP brute force, and vsftpd…